Lucene search

K
cveRedhatCVE-2007-4568
HistoryOct 05, 2007 - 9:17 p.m.

CVE-2007-4568

2007-10-0521:17:00
CWE-119
CWE-189
redhat
web.nvd.nist.gov
48
cve-2007-4568
x.org
x font server
integer overflow
arbitrary code execution
heap-based buffer overflow
nvd
vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.7

Confidence

High

EPSS

0.908

Percentile

98.9%

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

Affected configurations

Nvd
Node
x.orgx_font_serverMatch1.0.1
OR
x.orgx_font_serverMatch1.0.2
OR
x.orgx_font_serverMatch1.0.4
VendorProductVersionCPE
x.orgx_font_server1.0.1cpe:2.3:a:x.org:x_font_server:1.0.1:*:*:*:*:*:*:*
x.orgx_font_server1.0.2cpe:2.3:a:x.org:x_font_server:1.0.2:*:*:*:*:*:*:*
x.orgx_font_server1.0.4cpe:2.3:a:x.org:x_font_server:1.0.4:*:*:*:*:*:*:*

References

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

9.7

Confidence

High

EPSS

0.908

Percentile

98.9%